#security-tools

Local credential control for AI coding agents.

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

CryptoLyzer is a fast, flexible and comprehensive server cryptographic protocol (TLS, SSL, SSH, DNSSEC) and related setting (HTTP headers, DNS records) analyzer and fingerprint (JA3, HASSH tag) generator with Python API and CLI. (read-only clone of the original GitLab project)

A set of C# libraries for streamlined microservice development: audit, caching, outbox, CAP, MassTransit (events & config), idempotency, specifications, security, and other useful utilities. Packages: https://www.nuget.org/profiles/dex

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

Small Go password generator CLI with shell-safe mode and signed release artifacts

Fast and smart content discovery tool with profiles, recursive scanning and technology-aware enumeration.

Laravel Security Tool

Detection tells you a key is real; geiger tells you whether it's dangerous.

🛡️ Unify Trivy, Semgrep, Poutine & Zizmor scans into one AI-enhanced, offline-ready dashboard. Track CI/CD security trends, get LLM-powered analysis, and enforce policies — the open-source DevSecOps command center.

Sheriff is a tool to scan repositories and generate security reports.

Vulnerability detection and mitigation tool for Copy Fail and Dirty Frag bugs (CVE-2026-31431, CVE-2026-43284, CVE-2026-43500)

Recover symbols, types, interfaces, and method signatures from stripped Go binaries. Ghidra, IDA, and Binary Ninja exporters included.

Next generation web scanner

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.

Automatic security vulnerability remediation for your code.

Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.

NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration. Zero data exfiltration. MIT licensed.

Command-line TLS certificate inspector